redhat quay vulnerabilities in 2023, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 4.3CVE-2023-4956EPSS 0.6%
A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they intend to click on the top-level page. During the pentest, it…
- 6.5CVE-2023-4959EPSS 0.3%
A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an application. During the pentest, it was detected that the config-editor page is vulnerable to CSRF. The config-editor page i…
- 5.4CVE-2023-3384EPSS 0.5%
A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validation.py), the same validation is not performed when the label comes from an image.…